CMMC Level 2 Cybersecurity Compliance and Assessment

The contract seeks a subcontractor to deliver comprehensive cybersecurity compliance services aimed at achieving CMMC Level 2 certification, with a focus on aligning with NIST SP 800-171 standards for the protection of Covered Defense Information. Services include readiness assessments to evaluate current cybersecurity posture, detailed gap analyses to identify deficiencies, remediation planning and execution to address vulnerabilities, and ongoing support through the official certification process. The work is critical for entities handling sensitive defense data and must ensure full adherence to federal cybersecurity requirements under the Department of Defense framework. Performance of this contract is required to occur at a designated location in Jacksonville, with a ZIP code of 32212-0103, and must be completed in alignment with the response deadline of July 23, 2026. The solicitation is classified as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services, and is issued by the Department of Defense under the contracting entity Construction & Equipment Manu & Con. All activities must support the acquisition and maintenance of CMMC Level 2 certification, ensuring the organization can securely process, store, and transmit Controlled Unclassified Information in accordance with mandated federal standards.